Job Description
About BCS
BCS, a wholly owned subsidiary of NETS and part of the NETS Group, manages and operates the clearing and payment infrastructure for the Singapore Automated Clearing House. This includes services such as Fast and Secure Transfers (FAST), Inter-bank GIRO (IBG), and the Cheque Truncation System (CTS). BCS also supports PayNow and the SGQR Central Repository, among other services.
Team and Position Summary
The IT Security Team at BCS ensures the security, availability and resilience of BCS systems, protecting data and mitigating emerging cyber threats in alignment with regulatory requirements.
The Security Engineering unit is a key function within IT Security, responsible to oversee and advance BCS cybersecurity defense capabilities through effective vulnerability management and robust security solution design.
The Cyber Security Engineer will strengthen the organisation's cyber defence capabilities by leveraging strong hands-on experience in Elastic Security (SIEM/ELK Stack). The incumbent will be responsible for security monitoring, threat detection, incident investigation, and the administration and optimisation of cybersecurity solutions.
Key Responsibilities
- Manage, administer, and optimize Elastic Security, including Elasticsearch, Kibana, Logstash, and Beats.
- Develop and tune Security Information and Event Management (SIEM) use cases, correlation rules, dashboards, and alerts.
- Perform log onboarding, analysis, and security event monitoring.
- Conduct threat hunting and investigate security alerts and incidents.
- Support incident response activities, including containment and recovery.
- Operate and enhance Network Detection and Response (NDR) capabilities and analyze network security events.
- Participate in cybersecurity projects, solution implementations, and technology upgrades.
- Support cybersecurity assurance activities such as Vulnerability Assessment and Penetration Testing (VAPT), Red Team Exercises, and Table-top Exercises.
- Maintain operational and technical documentation.
- Stay current with cybersecurity threats, technologies, and best practices.
- Learn and support additional security platforms such as CyberArk, Trend Micro, and other enterprise security solutions.
Requirements
Education and Experience
- Degree in Computer Science, Information Security, Information Technology, Engineering, or a related discipline.
- At least 4 years of hands-on experience in administering cybersecurity solutions and supporting security operations, with proven expertise in Elastic Security (ELK Stack) or comparable SIEM platforms
Skills and Knowledge
- Strong understanding of Security Information and Event Management (SIEM), security monitoring, and log analytics concepts.
- Good knowledge of threat detection techniques, adversary behaviors, and the MITRE ATT&CK framework.
- Familiar with networking fundamentals, including protocols, traffic analysis, and common cybersecurity technologies.
- Possess a good understanding of various Operating Systems, e.g., Linux, Unix and Windows.
- Hands-on experience with Network Detection and Response (NDR) solutions, including monitoring, threat detection, investigation, and incident response activities.
- Familiarity with MAS Cyber Hygiene, Technology Risk Management Notices, MAS Technology Risk Management Guidelines, Cybersecurity Act, and Cybersecurity Code of Practice (CCoP).
- Excellent communication, analytical, and problem-solving skills, with the ability to engage effectively with stakeholders at all levels.
Preferred Certifications:
- Elastic Certified Engineer or Analyst
- CompTIA Security+ / CySA+
- Certified Information Systems Security Professional (CISSP)
- CyberArk Certifications
More Info
Key Skills
About Company
